Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

83.853exploits catalogados
39.383CVEs con explotación pública
24.695probados en laboratorio
3523 exploits
Metasploit200
Belkin Bulldog Plus Web Service Buffer Overflow
CVE-2009-20009CRITICAL08 mar 2009
Belkin Bulldog Plus Web Service Buffer Overflow
63RIESGO
abrir ↗
Metasploit600
Dogfood CRM spell.php Remote Command Execution
CVE-2009-20010CRITICAL03 mar 2009
Dogfood CRM spell.php RCE
63RIESGO
abrir ↗
Metasploit300
POP Peeper v3.4 UIDL Buffer Overflow
CVE-2009-1029—27 feb 2009
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a
50RIESGO
abrir ↗
Metasploit300
POP Peeper v3.4 DATE Buffer Overflow
CVE-2009-1029—27 feb 2009
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a
50RIESGO
abrir ↗
Metasploit600
ContentKeeper Web Remote Command Execution
CVE-2009-20011CRITICAL25 feb 2009
ContentKeeper Web Appliance < 125.10 RCE via mimencode
63RIESGO
abrir ↗
Metasploit400
Adobe JBIG2Decode Memory Corruption
CVE-2009-0658—19 feb 2009
Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitra
60RIESGO
abrir ↗
Metasploit400
Adobe JBIG2Decode Heap Corruption
CVE-2009-0658—19 feb 2009
Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitra
60RIESGO
abrir ↗
Metasploit300
Typo3 sa-2009-002 File Disclosure
CVE-2009-0815—10 feb 2009
The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 befo
50RIESGO
abrir ↗
Metasploit300
MS09-002 Microsoft Internet Explorer 7 CFunctionPointer Uninitialized Memory Corruption
CVE-2009-0075—10 feb 2009
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows r
60RIESGO
abrir ↗
Metasploit500
FeedDemon Stack Buffer Overflow
CVE-2009-0546—09 feb 2009
Stack-based buffer overflow in NewsGator FeedDemon 2.7 and earlier allows user-assisted remote attackers to execute arbi
50RIESGO
abrir ↗
Metasploit300
Orbit Downloader Connecting Log Creation Buffer Overflow
CVE-2009-0187—03 feb 2009
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote
50RIESGO
abrir ↗
Metasploit400
Free Download Manager Torrent Parsing Buffer Overflow
CVE-2009-0184—02 feb 2009
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Bui
43RIESGO
abrir ↗
Metasploit500
Free Download Manager Remote Control Server Buffer Overflow
CVE-2009-0183—02 feb 2009
Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allo
50RIESGO
abrir ↗
Metasploit300
Amaya Browser v11.0 'bdo' Tag Overflow
CVE-2009-0323—28 ene 2009
Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0 and 11.0 allow remote attackers to execute arbitrary
50RIESGO
abrir ↗
Metasploit300
HP OpenView Network Node Manager Toolbar.exe CGI Cookie Handling Buffer Overflow
CVE-2009-0920—21 ene 2009
Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow
60RIESGO
abrir ↗
Metasploit300
TYPO3 sa-2009-001 Weak Encryption Key File Disclosure
CVE-2009-0255—20 ene 2009
The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the
18RIESGO
abrir ↗
Metasploit400
HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow
CVE-2009-0133—17 ene 2009
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary
50RIESGO
abrir ↗
Metasploit600
Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute
CVE-2008-4388—15 ene 2009
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 d
50RIESGO
abrir ↗
Metasploit300
Oracle Secure Backup exec_qr() Command Injection Vulnerability
CVE-2008-5448—14 ene 2009
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers
30RIESGO
abrir ↗
Metasploit400
Oracle Secure Backup NDMP_CONNECT_CLIENT_AUTH Buffer Overflow
CVE-2008-5444—14 ene 2009
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers
50RIESGO
abrir ↗
Metasploit300
Oracle DB SQL Injection in MDSYS.SDO_TOPO_DROP_FTBL Trigger
CVE-2008-3979—13 ene 2009
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authent
50RIESGO
abrir ↗
Metasploit400
BEA WebLogic JSESSIONID Cookie Value Overflow
CVE-2008-5457—13 ene 2009
Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA
50RIESGO
abrir ↗
Metasploit300
TrendMicro Data Loss Prevention 5.5 Directory Traversal
CVE-2008-2938—09 ene 2009
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16,
60RIESGO
abrir ↗
Metasploit300
Tomcat UTF-8 Directory Traversal Vulnerability
CVE-2008-2938—09 ene 2009
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16,
60RIESGO
abrir ↗
Metasploit500
HP OpenView Network Node Manager Toolbar.exe CGI Buffer Overflow
CVE-2008-0067—07 ene 2009
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote att
50RIESGO
abrir ↗
Metasploit400
Destiny Media Player 1.61 PLS M3U Buffer Overflow
CVE-2009-3429—03 ene 2009
Stack-based buffer overflow in Pirate Radio Destiny Media Player 1.61 allows remote attackers to execute arbitrary code
50RIESGO
abrir ↗
Metasploit100
SasCam Webcam Server v.2.6.5 Get() Method Buffer Overflow
CVE-2008-6898—29 dic 2008
Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote
50RIESGO
abrir ↗
Metasploit400
Adobe Flash Player ActionScript Launch Command Execution Vulnerability
CVE-2008-5499—17 dic 2008
Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers
60RIESGO
abrir ↗
Metasploit500
Realtek Media Player Playlist Buffer Overflow
CVE-2008-5664—16 dic 2008
Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows
50RIESGO
abrir ↗
Metasploit600
MS09-004 Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection
CVE-2008-5416—09 dic 2008
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop
60RIESGO
abrir ↗

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.